src/warden-client/sh/install.sh

-#!/bin/bash
-#
-# install.sh
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#     this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-VERSION="1.1"
-
-#-------------------------------------------------------------------------------
-#				FUNCTIONS
-#-------------------------------------------------------------------------------
-usage()
-{
-	echo "Usage: `basename $0` [-d <directory>] [-u <user>] [-k <ssl_key_file>] [-c <ssl_cert_file>] [-a <ssl_ca_file>] [-hV]"
-	echo "-d <directory>            installation directory (default: /opt)"
-	echo "-u <user>                 owner of warden client package (user for running detection scripts)"
-	echo "-k <ssl_key_file>         path to SSL certificate key file"
-	echo "-c <ssl_cert_file>        path to SSL certificate file"
-	echo "-a <ssl_ca_file>          path to CA certificate file"
-	echo "-h                        print this help"
-	echo "-V                        print script version number and exit"
-	echo
-	echo "Example: # ./`basename $0` -d /opt -u detector -k /etc/ssl/private/client.key -c /etc/ssl/certs/client.pem -a /etc/ssl/certs/tcs-ca-bundle.pem"
-	echo
-	echo "Note: You must be root for running this script."
-	echo "      For more information about installation process, see README file (section Installation)."
-	echo
-	exit 0
-}
-
-
-version()
-{
-	echo "`basename ${0}` - current version is $VERSION"
-	exit 0
-}
-
-
-err()
-{
-	echo "FAILED!"
-	cat $err
-	rm -rf $err
-	echo
-	echo "Installation of $package_version package FAILED!!!"
-	exit 1
-}
-
-
-err_clean()
-{
-	echo "FAILED!"
-	echo " -> Uninstalling client package ... OK"
-	rm -rf $client_path > /dev/null 2>&1
-	cat $err
-	rm -rf $err
-	echo
-	echo "Installation of $package_version package FAILED!!!"
-	exit 1
-}
-
-
-os_chck()
-{
-	OS=`uname`
-	if [ "$OS" != "Linux" ]; then
-		echo "Sorry, unsupported operating system detected - \"$OS\"!"
-		exit 1
-	fi
-}
-
-
-shell_chck()
-{
-	SHELL=`echo $SHELL`
-	if [ "$SHELL" != "/bin/bash" ]; then
-		echo "Sorry, this script is usable in Bourne Again Shell (bash) only!"
-		exit 1
-	fi
-}
-
-
-root_chck()
-{
-	if [ $UID -ne 0 ]; then
-		echo "You must be root for running this script!"
-		exit 1
-	fi
-}
-
-
-params_chck()
-{
-	if [ -z $prefix ]; then
-		prefix=/opt
-		echo "Warning: parameter -d <directory> is not set - default installation directory is $prefix!"
-	fi
-	if [ -z $user ]; then
-		echo "Parameter -u <user> is not set!"
-		exit 1
-	fi
-	if [ -z $key ]; then
-		echo "Parameter -k <ssl_key_file> is not set!"
-		exit 1
-	fi
-	if [ -z $cert ]; then
-		echo "Parameter -c <ssl_cert_file> is not set!"
-		exit 1
-	fi
-	if [ -z $ca_file ]; then
-		echo "Parameter -a <ssl_ca_file> is not set!"
-		exit 1
-	fi
-}
-
-
-old_client_chck()
-{
-	old_package_version_file="$client_path/package_version.txt"
-	if [ -f $old_package_version_file ]; then
-		old_package_version=`cat $old_package_version_file`
-		echo "Sorry, but $old_package_version package is installed!"
-		echo "For update of warden client package please use update.sh script."
-		exit 1
-	fi
-}
-
-
-perl_chck()
-{
-	echo -n "Checking Perl interpreter ... "
-	which perl 1>/dev/null; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		echo "FAILED!"
-		echo "Error: Perl interpreter is not installed!"
-		exit 1
-	fi
-}
-
-
-modules_chck()
-{
-	for module in ${modules[@]};
-	do
-		echo -n "Checking $module module ... "
-		perl -e "use $module" 2> $err; ret_val=`echo $?`
-		if [ $ret_val -eq 0 ]; then
-			echo "OK"
-		else
-			err
-		fi
-	done
-}
-
-
-make_warden_dir()
-{
-	echo -n "Creating warden client directory ... "
-	cp -R $dirname/warden-client $prefix 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-
-	files=(CHANGELOG INSTALL LICENSE README README.cesnet)
-	for file in ${files[@]};
-	do
-		cp -u $dirname/$file "$client_path/doc"
-	done
-	cp -u $dirname/uninstall.sh "$client_path"
-	cp -u $dirname/package_version.txt "$client_path"
-}
-
-
-copy_key()
-{
-	echo -n "Copying certificate key file ... "
-	cp $key $etc 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-
-copy_cert()
-{
-	echo -n "Copying certificate file ... "
-	cp $cert $etc 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-
-make_conf_file()
-{
-	echo -n "Creating configuration file ... "
-	echo "#
-# warden-client.conf - configuration file for the warden sender/receiver client
-#
-
-#-------------------------------------------------------------------------------
-# URI - URI address of Warden server
-#-------------------------------------------------------------------------------
-\$URI = \"https://warden.cesnet.cz:443/Warden\";
-
-#-------------------------------------------------------------------------------
-# SSL_KEY_FILE - path to client SSL certificate key file
-#-------------------------------------------------------------------------------
-\$SSL_KEY_FILE = \"$etc/$key_file\";
-
-#-------------------------------------------------------------------------------
-# SSL_CERT_FILE - path to client SSL certificate file
-#-------------------------------------------------------------------------------
-\$SSL_CERT_FILE = \"$etc/$cert_file\";
-
-#-------------------------------------------------------------------------------
-# SSL_CA_FILE - path to CA certificate file
-#-------------------------------------------------------------------------------
-\$SSL_CA_FILE = \"$ca_file\";
-" > $conf_file 2> $err; ret_val=`echo $?`
-
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-
-change_permissions()
-{
-	echo -n "Changing permissions to installed package ... "
-	chown -R $user: $client_path 2>$err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-
-
-#-------------------------------------------------------------------------------
-#				MAIN
-#-------------------------------------------------------------------------------
-
-# list of used Perl modules
-modules=(SOAP::Lite IO::Socket::SSL SOAP::Transport::TCP FindBin DateTime)
-
-# OS test
-os_chck
-
-# Shell test
-shell_chck
-
-# read input
-while getopts "d:u:k:c:a:Vh" options; do
-	case $options in
-		d ) prefix=$OPTARG;;
-		u ) user=$OPTARG;;
-		k ) key=$OPTARG;;
-		c ) cert=$OPTARG;;
-		a ) ca_file=$OPTARG;;
-		h ) usage;;
-		V ) version;;
-		* ) usage;;
-	esac
-done
-
-# root test
-root_chck
-
-# params test
-params_chck
-
-# create variables
-dirname=`dirname $0`
-package_version=`cat $dirname/package_version.txt`
-key_file=`basename $key`
-cert_file=`basename $cert`
-[[ $prefix == */ ]] && prefix="${prefix%?}" # remove last char (slash) from prefix
-client_path="$prefix/warden-client"
-etc="$client_path/etc"
-conf_file="$etc/warden-client.conf"
-err="/tmp/warden-err"
-
-# check if warden-client is installed
-old_client_chck
-
-echo
-echo "------------------------- Dependencies check-in -------------------------"
-
-# Perl interpreter test
-perl_chck
-
-# Perl modules test
-modules_chck
-
-
-echo
-echo "------------------------- Installation process --------------------------"
-
-# make warden client directory
-make_warden_dir
-
-# copy cert key file 
-copy_key
-
-# copy cert file
-copy_cert
-
-# create conf file
-make_conf_file
-
-# change permissions
-change_permissions
-
-echo
-echo "Please check configuration file in $conf_file!"
-echo
-echo "Installation of $package_version package was SUCCESSFUL!!!"
-
-# cleanup section
-rm -rf $err
-
-exit 0

src/warden-client/sh/uninstall.sh

-#!/bin/bash
-#
-# uninstall.sh
-#
-# Copyright (C) 2012 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#     this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-VERSION="1.0"
-
-#-------------------------------------------------------------------------------
-#				FUNCTIONS
-#-------------------------------------------------------------------------------
-usage()
-{
-	echo "Usage: `basename $0` [-d <directory>] [-hV]"
-	echo "-d <directory>            uninstallation directory (default: /opt)"
-	echo "-h                        print this help"
-	echo "-V                        print script version number and exit"
-	echo
-	echo "Example: # ./`basename $0` -d /opt"
-	echo
-	echo "Note: You must be root for running this script."
-	echo "      For more information about uninstallation process, see README file (section Uninstallation)."
-	echo
-	exit 0
-}
-
-
-version()
-{
-	echo "`basename ${0}` - current version is $VERSION"
-	exit 0
-}
-
-
-err()
-{
-	echo "FAILED!"
-	cat $err
-	rm -rf $err $backup_dir
-	echo
-	echo "Uninstallation of $package_version package FAILED!!!"
-	exit 1
-}
-
-
-err_clean()
-{
-	echo "FAILED!"
-	echo " -> Reverting changes of warden client package ... OK"
-	rm -rf "$client_path/*" > /dev/null 2>&1
-	cp -R "$backup_dir/*" $client_path
-	cat $err
-	rm -rf $err $backup_dir
-	echo
-	echo "Uninstallation of $package_version package FAILED!!!"
-	exit 1
-}
-
-
-os_chck()
-{
-	OS=`uname`
-	if [ "$OS" != "Linux" ]; then
-		echo "Sorry, unsupported operating system detected - \"$OS\"!"
-		exit 1
-	fi
-}
-
-
-shell_chck()
-{
-	SHELL=`echo $SHELL`
-	if [ "$SHELL" != "/bin/bash" ]; then
-		echo "Sorry, this script is usable in Bourne Again Shell (bash) only!"
-		exit 1
-	fi
-}
-
-
-root_chck()
-{
-	if [ $UID -ne 0 ]; then
-		echo "You must be root for running this script!"
-		exit 1
-	fi
-}
-
-
-params_chck()
-{
-	if [ -z $prefix ]; then
-		prefix=/opt
-		echo "Warning: parameter -d <directory> is not set - default uninstallation directory is $prefix!"
-	fi
-}
-
-
-obtain_package_version()
-{
-	if [ -f $old_package_version_file ]; then 
-		package_version=`cat $old_package_version_file`
-	else
-		package_version="unknown"
-	fi
-}
-
-
-warden_dir_chck()
-{
-	echo -n "Checking warden client directory ... "
-	if [ ! -d $client_path ]; then
-		echo "FAILED!"
-		ls $client_path
-		exit 1
-	else
-		echo "OK"
-	fi
-}
-
-
-backup()
-{
-	echo -n "Backing-up warden client directory ... "
-	mkdir $backup_dir
-	cp -R $client_path $backup_dir 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err
-	fi
-}
-
-
-uninstall_warden_client()
-{
-	echo -n "Uninstalling $package_version package ... "
-	rm -rf $client_path 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-#-------------------------------------------------------------------------------
-#				MAIN
-#-------------------------------------------------------------------------------
-
-# OS test
-os_chck
-
-# Shell test
-shell_chck
-
-# read input
-while getopts "d:Vh" options; do
-	case $options in
-		d ) prefix=$OPTARG;;
-		h ) usage;;
-		V ) version;;
-		* ) usage;;
-	esac
-done
-
-# root test
-root_chck
-
-# params test
-params_chck
-
-# create variables
-[[ $prefix == */ ]] && prefix="${prefix%?}" # remove last char (slash) from prefix
-client_path="$prefix/warden-client"
-etc="$client_path/etc"
-old_package_version_file="$client_path/package_version.txt"
-err="/tmp/warden-err"
-backup_dir="/tmp/warden-backup"
-
-# obtain version of installed warden-client package
-obtain_package_version
-
-echo
-echo "------------------------- Uninstallation process --------------------------------"
-
-# check if $prefix/warden-client directory exist
-warden_dir_chck
-
-# make backup of currently installed warden-client package
-backup
-
-# do uninstallation
-uninstall_warden_client
-
-echo
-echo "Uninstallation of $package_version package was SUCCESSFUL!!!"
-
-# cleanup section
-rm -rf $err $backup_dir
-
-exit 0

src/warden-client/sh/update.sh

-#!/bin/bash
-#
-# update.sh
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#     this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-
-VERSION="1.0"
-
-#-------------------------------------------------------------------------------
-#				FUNCTIONS
-#-------------------------------------------------------------------------------
-usage()
-{
-	echo "Usage: `basename $0` [-d <directory>] [-hV]"
-	echo "-d <directory>            destination directory (default: /opt)"
-	echo "-h                        print this help"
-	echo "-V                        print script version number and exit"
-	echo
-	echo "Example: # ./`basename $0` -d /opt"
-	echo
-	echo "Note: You must be root for running this script."
-	echo "      For more information about update process, see README file (section Update)."
-	echo
-	exit 0
-}
-
-
-version()
-{
-	echo "`basename ${0}` - current version is $VERSION"
-	exit 0
-}
-
-
-err()
-{
-	echo "FAILED!"
-	cat $err
-	rm -rf $err
-	rm -rf $backup_dir
-	echo
-	echo "Update from $old_package_name to $package_name package FAILED!!!"
-	exit 1
-}
-
-
-err_clean()
-{
-	echo "FAILED!"
-	echo " -> Reverting changes of warden client package ... OK"
-	rm -rf "$client_path/*" > /dev/null 2>&1
-	cp -R "$backup_dir/*" $client_path
-	cat $err
-	rm -rf $err $backup_dir
-	echo
-	echo "Update from $old_package_name to $package_name package FAILED!!!"
-	exit 1
-}
-
-
-os_chck()
-{
-	OS=`uname`
-	if [ "$OS" != "Linux" ]; then
-		echo "Sorry, unsupported operating system detected - \"$OS\"!"
-		exit 1
-	fi
-}
-
-
-shell_chck()
-{
-	SHELL=`echo $SHELL`
-	if [ "$SHELL" != "/bin/bash" ]; then
-		echo "Sorry, this script is usable in Bourne Again Shell (bash) only!"
-		exit 1
-	fi
-}
-
-
-root_chck()
-{
-	if [ $UID -ne 0 ]; then
-		echo "You must be root for running this script!"
-		exit 1
-	fi
-}
-
-
-params_chck()
-{
-	if [ -z $prefix ]; then
-		prefix=/opt
-		echo "Warning: parameter -d <directory> is not set - default installation directory is $prefix!"
-	fi
-}
-
-
-obtain_package_version()
-{
-	if [ -f $old_package_version_file ]; then 
-		old_package_version=`cat $old_package_version_file`
-	else
-		echo "Sorry, but warden-client package is not installed!"
-		echo "For installation of warden client package please use install.sh script."
-		exit 1
-	fi
-}
-
-
-perl_chck()
-{
-	echo -n "Checking Perl interpreter ... "
-	which perl 1>/dev/null; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		echo "FAILED!"
-		echo "Error: Perl interpreter is not installed!" 
-		exit 1
-	fi
-}
-
-
-modules_chck()
-{
-	for module in ${modules[@]};
-	do
-		echo -n "Checking $module module ... "
-		perl -e "use $module" 2> $err; ret_val=`echo $?`
-		if [ $ret_val -eq 0 ]; then
-			echo "OK"
-		else
-			err
-		fi
-	done
-}
-
-
-warden_dir_chck()
-{
-	echo -n "Checking warden client directory ... "
-	if [ ! -d $client_path ]; then
-		echo "FAILED!"
-		ls $client_path
-		exit 1
-	else
-		echo "OK"
-	fi
-}
-
-
-backup()
-{
-	echo -n "Backing-up warden client directory ... "
-	mkdir $backup_dir
-	cp -R $client_path $backup_dir 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err
-	fi
-}
-
-
-obtain_warden_user()
-{
-	echo -n "Obtaining warden client directory owner ... "
-	user=`stat -c %U $conf_file` 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err
-	fi
-}
-
-
-update_warden_dir()
-{
-	echo -n "Updating warden client directory ... "
-	rsync -q --recursive --archive --delete   --exclude="$dirname/warden-client/etc"\
-						  --exclude="$dirname/warden-client/var"\
-						  warden-client $prefix 2> $err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-
-	files=(CHANGELOG INSTALL LICENSE README README.cesnet)
-	for file in ${files[@]};
-	do  
-		cp -u "$dirname/$file" "$client_path/doc"
-	done
-	cp -u "$dirname/uninstall.sh" "$client_path"
-}
-
-
-make_conf_file()
-{
-	echo -n "Creating configuration file ... "
-	uri=`cat $conf_file | grep '$URI'`
-	ssl_key_file=`cat $conf_file | grep '$SSL_KEY_FILE'`
-	ssl_cert_file=`cat $conf_file | grep '$SSL_CERT_FILE'`
-	ssl_ca_file=`cat $conf_file | grep '$SSL_CA_FILE'`
-	echo "#
-# warden-client.conf - configuration file for the warden sender/receiver client
-#
-
-#-------------------------------------------------------------------------------
-# URI - URI address of Warden server
-#-------------------------------------------------------------------------------
-$uri
-
-#-------------------------------------------------------------------------------
-# SSL_KEY_FILE - path to client SSL certificate key file
-#-------------------------------------------------------------------------------
-$ssl_key_file
-
-#-------------------------------------------------------------------------------
-# SSL_CERT_FILE - path to client SSL certificate file
-#-------------------------------------------------------------------------------
-$ssl_cert_file
-
-#-------------------------------------------------------------------------------
-# SSL_CA_FILE - path to CA certificate file
-#-------------------------------------------------------------------------------
-$ssl_ca_file
-" > $conf_file 2> $err; ret_val=`echo $?`
-
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-
-change_permissions()
-{
-	echo -n "Changing permissions to updated package ... "
-	chown -R $user: $client_path 2>$err; ret_val=`echo $?`
-	if [ $ret_val -eq 0 ]; then
-		echo "OK"
-	else
-		err_clean
-	fi
-}
-
-
-
-#-------------------------------------------------------------------------------
-#				MAIN
-#-------------------------------------------------------------------------------
-
-# list of used Perl modules
-modules=(SOAP::Lite IO::Socket::SSL SOAP::Transport::TCP FindBin)
-
-# OS test
-os_chck
-
-# Shell test
-shell_chck
-
-# read input
-while getopts "d:Vh" options; do
-	case $options in
-		d ) prefix=$OPTARG;;
-		h ) usage;;
-		V ) version;;
-		* ) usage;;
-	esac
-done
-
-# root test
-root_chck
-
-# params test
-params_chck
-
-# create variables
-dirname=`dirname $0`
-package_version=`cat $dirname/package_version.txt`
-[[ $prefix == */ ]] && prefix="${prefix%?}" # remove last char (slash) from prefix
-client_path="$prefix/warden-client"
-etc="$client_path/etc"
-old_package_version_file="$client_path/package_version.txt"
-conf_file="$etc/warden-client.conf"
-err="/tmp/warden-err"
-backup_dir="/tmp/warden-backup"
-
-# obtain version of old warden client
-#obtain_package_version		# ENABLE for next client package
-old_package_version="1.0.0"
-
-echo
-echo "------------------------- Dependencies check-in -------------------------"
-
-# Perl interpreter test
-perl_chck
-
-# Perl modules test
-modules_chck
-
-echo
-echo "------------------------- Update process --------------------------------"
-
-# check warden client directory
-warden_dir_chck
-
-# backup old warden client installation
-backup
-
-# obtain current warden client user
-obtain_warden_user
-
-# make warden client directory
-update_warden_dir
-
-# create conf file
-make_conf_file
-
-# change permissions
-change_permissions
-
-echo
-echo "Please check configuration file in $conf_file!"
-echo
-echo "Update from $old_package_version to $package_version package was SUCCESSFUL!!!"
-
-# cleanup section
-rm -rf $err $backup_dir
-
-exit 0

src/warden-server/bin/getClients.pl

-#!/usr/bin/perl -w
-#
-# getClients.pl
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#               Jan SOUKAL      <soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-use strict;
-use Getopt::Std;
-use File::Basename;
-
-our $VERSION = "1.0";
-
-my $warden_path = '/opt/warden-server';
-require $warden_path . '/lib/WardenStatus.pm';
-my $filename = basename($0);
-
-
-#-------------------------------------------------------------------------------
-#                               Functions
-#-------------------------------------------------------------------------------
-sub usage {
-  print "Usage: $filename [without parameters]\n";
-  exit 1;
-}
-
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  $msg = trim($msg);
-  print $msg . "\n";
-  exit 1;
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# trim - remove whitespace from the start and end of the string
-#-------------------------------------------------------------------------------
-sub trim
-{
-  my $string = shift;
-  $string =~ s/^\s+//;
-  $string =~ s/\s+$//;
-  return $string;
-} # End of trim
-
-
-#-------------------------------------------------------------------------------
-#                               MAIN
-#-------------------------------------------------------------------------------
-our ($opt_h);
-
-die usage unless getopts("h");
-my $help = $opt_h;
-
-# catch help param
-if ($help) {
-  usage;
-}
-
-# superuser controle
-my $UID = $<;
-if ($UID != 0) {
-  die errMsg("You must be root for running this script!")
-}
-
-
-my @clients = WardenStatus::getClients($warden_path);
-print "+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+\n";
-print "| Client ID  | Hostname                       | Registered          | Requestor  | Service              | CT | Type            | ROE  | Description tags               | IP Net Client      |\n";
-print "+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+\n";
-foreach (@clients) {
-  printf("| %-10s ", @$_[0]);
-  printf("| %-30s ", @$_[1]);
-  printf("| %19s ", @$_[2]);
-  printf("| %-10s ", @$_[3]);
-  printf("| %-20s ", @$_[4]);
-  printf("| %-2s ", @$_[5]);
-  printf("| %-15s ", @$_[6]);
-  printf("| %-4s ", @$_[7]);
-  printf("| %-30s ", @$_[8]);
-  printf("| %-18s |\n", @$_[9]);
-}
-print "+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+\n";
-print "\n";
-print "Current registered clients in: " . scalar localtime(time) . "\n";
-
-exit 0;

src/warden-server/bin/getStatus.pl

-#!/usr/bin/perl -w
-#
-# getStatus.pl
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#               Jan SOUKAL      <soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-use strict;
-use Getopt::Std;
-use File::Basename;
-
-our $VERSION = "1.0";
-
-my $warden_path = '/opt/warden-server';
-require $warden_path . '/lib/WardenStatus.pm';
-my $filename = basename($0);
-
-#-------------------------------------------------------------------------------
-#                               Functions
-#-------------------------------------------------------------------------------
-sub usage {
-  print "Usage: $filename [without parameters]\n";
-  exit 1;
-}
-
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  $msg = trim($msg);
-  print $msg . "\n";
-  exit 1;
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# trim - remove whitespace from the start and end of the string
-#-------------------------------------------------------------------------------
-sub trim
-{
-  my $string = shift;
-  $string =~ s/^\s+//;
-  $string =~ s/\s+$//;
-  return $string;
-} # End of trim
-
-
-#-------------------------------------------------------------------------------
-#                               MAIN
-#-------------------------------------------------------------------------------
-our ($opt_h);
-
-die usage unless getopts("h");
-my $help = $opt_h;
-
-# catch help param
-if ($help) {
-  usage;
-}
-
-# superuser controle
-my $UID = $<;
-if ($UID != 0) {
-  die errMsg("You must be root for running this script!")
-}
-
-my @status = WardenStatus::getStatus($warden_path);
-
-# take and remove first element of array @status and save it into $server_status_ref
-my $server_status_ref = shift(@status);
-my @server_status = @$server_status_ref;
-
-print "Warden server variables:\n";
-print "========================\n";
-print "SERVER_VERSION:\t\t$server_status[0]\n";
-print "ADDRESS:\t\t$server_status[1]\n";
-print "PORT:\t\t\t$server_status[2]\n";
-print "LOGDIR:\t\t\t$server_status[3]\n";
-print "PIDDIR:\t\t\t$server_status[4]\n";
-print "VARDIR:\t\t\t$server_status[5]\n";
-print "SSL_KEY_FILE:\t\t$server_status[6]\n";
-print "SSL_CERT_FILE:\t\t$server_status[7]\n";
-print "SSLCA_FILE:\t\t$server_status[8]\n";
-print "SYSLOG_FACILITY:\t$server_status[9]\n";
-print "\n";
-
-print "Warden server status:\n";
-print "=====================\n";
-print "Database size:\t\t\t$server_status[10]\n";
-print "Count of saved events:\t\t$server_status[11]\n";
-print "Last ID in events table:\t$server_status[12]\n";
-print "Time of first inserted event:\t$server_status[13] (UTC)\n";
-print "Time of latest inserted event:\t$server_status[14] (UTC)\n";
-print "Count of registered clients:\t$server_status[15]\n";
-print "\n";
-
-# check if sum of registered client isn't 0
-if ($server_status[15] != 0) {
-  print "Statistics of registered senders:\n";
-  print "+-----------------------------------------------------------------------------------------------------------+\n";
-  print "| Client ID  | Hostname                       | Service              | Stored events | Last insertion (UTC) |\n";
-  print "+-----------------------------------------------------------------------------------------------------------+\n";
-  foreach my $client_status_ref (@status){
-    my @client_status = @$client_status_ref;
-    printf("| %-10s ", $client_status[0]);
-    printf("| %-30s ", $client_status[1]);
-    printf("| %-20s ", $client_status[2]);
-    printf("| %-13s ", $client_status[3]);
-    printf("| %-20s |\n", $client_status[4]);
-  }
-  print "+-----------------------------------------------------------------------------------------------------------+\n";
-  print "\n";
-}
-
-print "Current server status in:\t" . scalar localtime(time) . "\n";
-
-exit 0;

src/warden-server/bin/registerReceiver.pl

-#!/usr/bin/perl -w
-#
-# registerReceiver.pl
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#               Jan SOUKAL      <soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-use strict;
-use Getopt::Std;
-use Switch;
-use File::Basename;
-
-our $VERSION = "1.0";
-
-my $warden_path = '/opt/warden-server';
-require $warden_path . '/lib/WardenReg.pm';
-my $filename = basename($0);
-
-#-------------------------------------------------------------------------------
-#                               Functions
-#-------------------------------------------------------------------------------
-sub usage {
-  print "Usage: $filename [-h -o -n <hostname> -r <requestor> -t <type> -i <ip_net_client>]\n";
-  exit 1;
-}
-
-
-sub help {
-  print "$filename [-h -o -n <hostname> -r <requestor> -t <type> -i <ip_net_client>]\n";
-  print "-h     print this text and exit\n";
-  print "-n     hostname of receiver\n";
-  print "-r     client registration requestor\n";
-  print "-t     type of received events\n";
-  print "-o     enable receiving of own events\n";
-  print "-i     CIDR of receiver\n";
-  exit 0;
-}
-
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  $msg = trim($msg);
-  print $msg . "\n";
-  exit 1;
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# trim - remove whitespace from the start and end of the string
-#-------------------------------------------------------------------------------
-sub trim
-{
-  my $string = shift;
-  $string =~ s/^\s+//;
-  $string =~ s/\s+$//;
-  return $string;
-} # End of trim
-
-
-#-------------------------------------------------------------------------------
-#                               MAIN
-#-------------------------------------------------------------------------------
-our ($opt_n, $opt_r, $opt_t, $opt_o, $opt_i, $opt_h);
-
-if ($#ARGV == -1) {usage}
-
-die usage unless getopts("n:r:t:i:ho");
-my $hostname            = $opt_n;
-my $requestor           = $opt_r;
-my $type		= $opt_t;
-my $ip_net_client       = $opt_i;
-my $help                = $opt_h;
-my $receive_own_events	= "f";
-
-if ($opt_o) {
-  $receive_own_events = "t";
-}
-
-# catch help param
-if ($help) {
-  help;
-}
-
-# superuser controle
-my $UID = $<;
-if ($UID != 0) {die errMsg("You must be root for running this script!")}
-
-# check parameters definition
-switch () {
-  case {!defined $hostname} { print "ERROR: Parameter 'hostname' is not defined!\n"; exit 1; }
-  case {!defined $requestor} { print "ERROR: Parameter 'requestor' is not defined!\n"; exit 1; }
-  case {!defined $type} { print "ERROR: Parameter 'type' is not defined!\n"; exit 1; }
-  case {!defined $receive_own_events} { print "ERROR: Parameter 'receive_own_events' is not defined!\n"; exit 1; }
-  case {!defined $ip_net_client} { print "ERROR: Parameter 'ip_net_client' is not defined!\n"; exit 1; }
-}
-
-my $return = WardenReg::registerReceiver($warden_path, $hostname, $requestor, $type, $receive_own_events, $ip_net_client);
-$return ? print "Registration of $hostname was SUCCESSFUL...\n" : print "Registration of $hostname FAILED!\n";
-
-exit 0;

src/warden-server/bin/registerSender.pl

-#!/usr/bin/perl -w
-#
-# registerSender.pl
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#               Jan SOUKAL      <soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-use strict;
-use Getopt::Std;
-use Switch;
-use File::Basename;
-
-our $VERSION = "1.0";
-
-my $warden_path = '/opt/warden-server';
-require $warden_path . '/lib/WardenReg.pm';
-my $filename = basename($0);
-
-#-------------------------------------------------------------------------------
-#				Functions
-#-------------------------------------------------------------------------------
-sub usage {
-  print "Usage: $filename [-h -n <hostname> -r <requestor> -s <service> -d <description_tags> -i <ip_net_client>]\n";
-  exit 1;
-}
-
-sub help {
-  print "$filename [-h -n <hostname> -r <requestor> -s <service> -d <description_tags> -i <ip_net_client>]\n";
-  print "-h 	print this text and exit\n";
-  print "-n 	hostname of sender\n";
-  print "-r 	client registration requestor\n";
-  print "-s 	name of service which sent events\n";
-  print "-d 	description tags of send events\n";
-  print "-i 	CIDR of sender\n";
-  exit 0;
-}
-
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  $msg = trim($msg);
-  print $msg . "\n";
-  exit 1;
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# trim - remove whitespace from the start and end of the string
-#-------------------------------------------------------------------------------
-sub trim
-{
-  my $string = shift;
-  $string =~ s/^\s+//;
-  $string =~ s/\s+$//;
-  return $string;
-} # End of trim
-
-
-#-------------------------------------------------------------------------------
-#				MAIN
-#-------------------------------------------------------------------------------
-our ($opt_n, $opt_r, $opt_s, $opt_d, $opt_i, $opt_h);
-
-if ($#ARGV == -1) {usage}
-
-die usage unless getopts("n:r:s:d:i:h");
-my $hostname		= $opt_n;
-my $requestor		= $opt_r;
-my $service		= $opt_s;
-my $description_tags 	= $opt_d;
-my $ip_net_client	= $opt_i;
-my $help 		= $opt_h;
-
-# catch help param
-if ($help) {
-  help;
-}
-
-# superuser controle
-my $UID = $<;
-if ($UID != 0) {die errMsg("You must be root for running this script!")}
-
-# check parameters definition
-switch () {
-  case {!defined $hostname} { print "ERROR: Parameter 'hostname' is not defined!\n"; exit 1; }
-  case {!defined $requestor} { print "ERROR: Parameter 'requestor' is not defined!\n"; exit 1; }
-  case {!defined $service} { print "ERROR: Parameter 'service' is not defined!\n"; exit 1; }
-  case {!defined $description_tags} { print "ERROR: Parameter 'description_tags' is not defined!\n"; exit 1; }
-  case {!defined $ip_net_client} { print "ERROR: Parameter 'ip_net_client' is not defined!\n"; exit 1; }
-}
-
-# register sender at warden server
-my $return = WardenReg::registerSender($warden_path, $hostname, $requestor, $service, $description_tags, $ip_net_client);
-$return ? print "Registration of $hostname was SUCCESSFUL...\n" : print "Registration of $hostname FAILED!\n";
-
-exit 0;

src/warden-server/bin/unregisterClient.pl

-#!/usr/bin/perl -w
-#
-# unregisterClient.pl
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK	<plesnik@ics.muni.cz>
-#		Jan SOUKAL 	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-use strict;
-use Getopt::Std;
-use Switch;
-use File::Basename;
-
-our $VERSION = "1.0";
-
-my $warden_path = '/opt/warden-server';
-require $warden_path . '/lib/WardenReg.pm';
-my $filename = basename($0);
-
-#-------------------------------------------------------------------------------
-#                               Functions
-#-------------------------------------------------------------------------------
-sub usage {
-  print "Usage: $filename [-h -i <client_id>]\n";
-  exit 1;
-}
-
-sub help {
-  print "$filename [-h -i <client_id>]\n";
-  print "-h     print this text and exit\n";
-  print "-i     client_id for unregistration\n";
-  exit 0;
-}
-
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  $msg = trim($msg);
-  print $msg . "\n";
-  exit 1;
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# trim - remove whitespace from the start and end of the string
-#-------------------------------------------------------------------------------
-sub trim
-{
-  my $string = shift;
-  $string =~ s/^\s+//;
-  $string =~ s/\s+$//;
-  return $string;
-} # End of trim
-
-
-#-------------------------------------------------------------------------------
-#                               MAIN
-#-------------------------------------------------------------------------------
-our ($opt_h, $opt_i);
-
-if ($#ARGV == -1) {usage}
-
-die usage unless getopts("i:h");
-my $client_id	= $opt_i;
-my $help        = $opt_h;
-
-# catch help param
-if ($help) {
-	  help;
-}
-
-# superuser controle
-my $UID = $<;
-if ($UID != 0) {die errMsg("You must be root for running this script!")}
-
-# check parameters definition
-if (!defined $client_id) {
-  print "ERROR: Parameter 'client_id' is not defined!\n";
-  exit 1;
-}
-
-my $return = WardenReg::unregisterClient($warden_path, $client_id);
-$return ? print "Unregistration of client (#$client_id) was SUCCESSFUL...\n" : print "Unregistration of client (# $client_id) FAILED!\n";
-
-exit 0;

src/warden-server/bin/warden-alive

-#!/usr/bin/perl
-#
-# warden-alive
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s):    Jan Mach  <jan.mach@cesnet.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-our $VERSION = "1.0";
-
-my $rv =  `ps aux | grep "/usr/bin/perl -w /opt/warden-server/bin/warden-server.pl" | grep -v grep | grep -v process-alive | wc -l`;
-if ($rv) {
-	print "WARDEN OK: Warden server is running\n";
-}
-else {
-	print "WARDEN CRITICAL: Warden server is not running\n";
-};

src/warden-server/bin/warden-server.pl

-#!/usr/bin/perl -w
-#
-# warden-server.pl
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#               Jan SOUKAL      <soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-package Warden;
-
-use strict;
-use SOAP::Lite;
-use SOAP::Transport::TCP;
-use File::Pid;
-use POSIX;
-use DBI;
-use Format::Human::Bytes;
-use Sys::Syslog qw(:DEFAULT setlogsock);
-Sys::Syslog::setlogsock('unix');
-use File::Basename;
-use FindBin;
-use Data::Dumper;
-use Net::CIDR::Lite;
-use DateTime;
-
-our $VERSION = "1.0";
-
-################################################################################
-#			CONFIG FILE VARIABLES
-################################################################################
-
-my $script_name = $FindBin::Script;
-my $conf_file = "/opt/warden-server/etc/warden-server.conf";
-
-# first declaration of globa variables from config file
-our $ADDRESS		= undef;
-our $PORT		= undef;
-our $LOGDIR		= undef;
-our $PIDDIR		= undef;
-our $VARDIR		= undef;
-our $SSL_KEY_FILE	= undef;
-our $SSL_CERT_FILE	= undef;
-our $SSL_CA_FILE	= undef;
-our $FACILITY		= undef;
-
-# read config file
-if ( ! open( TMP, $conf_file) ) {
-  die errMsg("Can't read config file '$conf_file': $!\n");
-}
-close TMP;
-
-# load set variables by user
-if ( !do $conf_file ) {
-  die errMsg("Errors in config file '$conf_file': $@");
-}
-
-
-
-################################################################################
-#				VARIABLES
-################################################################################
-my $die_now	= 0;
-
-# PID path
-my $pid_file    = $PIDDIR . $script_name . ".pid";
-
-# DB file
-my $db_file 	= "warden.db";
-my $db		= $VARDIR . $db_file;
-
-# connect to DB - DBH is GLOBAL variable
-my $dbargs = {AutoCommit => 0, PrintError => 1};
-our $DBH = DBI->connect("dbi:SQLite:dbname=$db","","",$dbargs) or die errMsg("Can't connect to DB: $!");
-
-
-
-################################################################################
-#				LOCAL FUNCTIONS
-################################################################################
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  $msg = trim($msg);
-  print $msg . "\n";
-  exit 1;
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# trim - remove whitespace from the start and end of the string
-#-------------------------------------------------------------------------------
-sub trim
-{
-  my $string = shift;
-  $string =~ s/^\s+//;
-  $string =~ s/\s+$//;
-  return $string;
-} # End of trim
-
-
-#-------------------------------------------------------------------------------
-# write2log - writing message to syslog
-#-------------------------------------------------------------------------------
-sub write2log
-{
-  my $priority	= shift;
-  my $msg 	= shift;
-  my $filename	= File::Basename::basename($0);
-
-  Sys::Syslog::openlog($filename, "cons,pid", $FACILITY);
-  Sys::Syslog::syslog("$priority", "$msg");
-  Sys::Syslog::closelog();
-} # End of write2log
-
-
-#-------------------------------------------------------------------------------
-# signalHandler - catch signals and end the program if one is caught.
-#-------------------------------------------------------------------------------
-sub signalHandler
-{
-  $die_now = 1;    		# this will cause the "infinite loop" to exit
-} # End of signalHandler
-
-
-#-------------------------------------------------------------------------------
-# sslErrorHandler - handle errors in SSL negitiation
-#-------------------------------------------------------------------------------
-sub sslErrorHandler
-{
-  my $socket 	= shift;
-  my $msg	= shift;
-
-  my $ip = $socket->peerhost;
-  print $socket $msg;
-  $socket->close;
-  write2log ("err", "Caught SSL handshake error from $ip: $msg");
-  return 1;
-} # End of sslErrorHandler
-
-
-
-################################################################################
-# 				SOAP Functions
-################################################################################
-
-#-----------------------------------------------------------------------------
-# saveNewEvent - save new received event into database
-#-----------------------------------------------------------------------------
-sub saveNewEvent
-{
-  my ($class, $data) = @_;
-  my ($sth, $cidr_list);
-
-  # variables defined by server
-  our $IP;	# IP address of sender
-  our $CN;	# common name of sender
-  my $cn_db = $DBH->quote($CN);
-
-  # variables defined by server
-  my $client_type	= "s";			# incoming client MUST be sender
-  my $client_type_db	= $DBH->quote($client_type);
-  my $valid		= "t";			# registered sender has valid events
-  my $valid_db		= $DBH->quote($valid);
-  my $received		= DateTime->now;	# time of event delivery (UTC)
-  my $received_db	= $DBH->quote($received);
-
-  # parse object (event) parameters
-  my $service		= $data->{'SERVICE'};
-  my $service_db	= $DBH->quote($service);
-  my $detected		= $data->{'DETECTED'};
-  my $detected_db	= $DBH->quote($detected);
-  my $type		= $data->{'TYPE'};
-  my $type_db		= $DBH->quote($type);
-  my $source_type	= $data->{'SOURCE_TYPE'};
-  my $source_type_db	= $DBH->quote($source_type);
-  my $source		= $data->{'SOURCE'};
-  my $source_db		= $DBH->quote($source);
-  my $target_proto	= $data->{'TARGET_PROTO'};
-  my $target_proto_db	= $DBH->quote($target_proto);
-  my $target_port	= $data->{'TARGET_PORT'};
-  my $target_port_db	= $DBH->quote($target_port);
-  my $attack_scale 	= $data->{'ATTACK_SCALE'};
-  my $attack_scale_db 	= $DBH->quote($attack_scale);
-  my $note		= $data->{'NOTE'};
-  my $note_db		= $DBH->quote($note);
-  my $priority		= $data->{'PRIORITY'};
-  my $priority_db	= $DBH->quote($priority);
-  my $timeout		= $data->{'TIMEOUT'};
-  my $timeout_db	= $DBH->quote($timeout);
-
-  # Authorization of incomming client
-  #-----------------------------------------------------------------------------
-
-  # obtain cidr based on rigth common name, service and client_type
-  $sth = $DBH->prepare("SELECT ip_net_client FROM clients WHERE hostname = $cn_db AND service = $service_db AND client_type = $client_type_db;");
-  if ( !defined $sth ) {die("Cannot prepare authorization statement in saveNewEvent: $DBI::errstr\n")}
-  $sth->execute;
-  my $cidr = $sth->fetchrow();
-
-  # check if client is registered
-  if (!defined $cidr) {
-    write2log ("err", "Unauthorized access to saveNewEvent from: $IP ($CN) - client is not registered");
-    die("Access denied - client is not registered at warden server!");
-  } else {
-    $cidr_list = Net::CIDR::Lite
-      -> new
-      -> add($cidr);
-  }
-
-  # check if client has IP from registered CIDR
-  if (!$cidr_list->bin_find($IP)) {
-    write2log ("err", "Unauthorized access to saveNewEvent from: $IP ($CN) - access from bad subnet: $cidr");
-    die("Access denied - access from bad subnet!");
-  } else {
-
-    # insert new event
-    $DBH->do("INSERT INTO events VALUES (null,$cn_db,$service_db,$detected_db,$received_db,$type_db,$source_type_db,$source_db,$target_proto_db,$target_port_db,$attack_scale_db,$note_db,$priority_db,$timeout_db,$valid_db);");
-    if ($DBH->err()) {die("Cannot do insert statement in saveNewEvent: $DBI::errstr\n")}
-    $DBH->commit();
-
-    # log last inserted ID
-    $sth = $DBH->prepare("SELECT last_insert_rowid();");
-    if ( !defined $sth ) {die("Cannot prepare last ID statement in saveNewEvent: $DBI::errstr\n")}
-    $sth->execute;
-    my $id= $sth->fetchrow();
-    write2log ("info", "Stored new event (#$id) from $IP ($CN)");
-
-    if (! defined $id) {
-      write2log ("err", "Event from $IP ($CN) was not save: INSERT INTO events VALUES (null,$cn_db,$service_db,$detected_db,$received_db,$type_db,$source_type_db,$source_db,$target_proto_db,$target_port_db,$attack_scale_db,$note_db,$priority_db,$timeout_db,$valid_db);");
-      die("Event was not save at warden server - database return empty ID!");
-    } else {
-      return 1;
-    }
-  }
-} # END of saveNewEvent
-
-
-#-----------------------------------------------------------------------------
-# getNewEvents - get new events from the DB greater than received ID
-#-----------------------------------------------------------------------------
-sub getNewEvents
-{
-  my ($class, $data) = @_;
-  my ($sth, @events, $event, @ids);
-  my ($id, $hostname, $service, $detected, $type, $source_type, $source, $target_proto, $target_port, $attack_scale, $note, $priority, $timeout);
-
-  # variables defined by server
-  our $IP;	# IP address of sender
-  our $CN;	# common name of sender
-  my $cn_db 		= $DBH->quote($CN);
-  my $client_type	= "r";	# incoming client MUST be sender
-  my $client_type_db	= $DBH->quote($client_type);
-  my $cidr_list;
-
-  # parse SOAP data object
-  my $requested_type	= $data->{'REQUESTED_TYPE'};
-  my $requested_type_db	= $DBH->quote($requested_type);
-  my $last_id		= $data->{'LAST_ID'};
-  my $last_id_db	= $DBH->quote($last_id);
-
-  # Authorization of incomming client
-  #-----------------------------------------------------------------------------
-
-  # obtain cidr based on rigth common name, service and client_type
-  $sth = $DBH->prepare("SELECT receive_own_events, ip_net_client FROM clients WHERE hostname = $cn_db AND type = $requested_type_db AND client_type = $client_type_db;");
-  if ( !defined $sth ) {die("Cannot prepare authorization statement in getNewEvents: $DBI::errstr\n")}
-  $sth->execute;
-  my ($receive_own_events, $cidr) = $sth->fetchrow();
-
-  # check if client is registered
-  if (!defined $cidr) {
-    write2log ("err", "Unauthorized access to getNewEvents from: $IP ($CN) - client is not registered");
-    die("Access denied - client is not registered at warden server!");
-  } else {
-    $cidr_list = Net::CIDR::Lite
-      -> new
-      -> add($cidr);
-  }
-
-  # check if client has IP from registered CIDR
-  if (!$cidr_list->bin_find($IP)) {
-    write2log ("err", "Unauthorized access to getNewEvents from: $IP ($CN) - access from bad subnet: $cidr");
-    die("Access denied - access from bad subnet!");
-  } else {
-
-    # check if client want your own events or not
-    if ($receive_own_events eq 't') {
-      $sth = $DBH->prepare("SELECT * FROM events WHERE type != 'test' AND id > $last_id_db AND type = $requested_type_db AND valid = 't' ORDER BY id ASC;");
-    } else {
-      my ($domain) = $CN =~ /([^\.]+\.[^\.]+)$/;
-      my $domain_db = $DBH->quote("%$domain");
-      $sth = $DBH->prepare("SELECT * FROM events WHERE type != 'test' AND id > $last_id_db AND type = $requested_type_db AND valid = 't' AND hostname NOT LIKE $domain_db ORDER BY id ASC;");
-    }
-    if ( !defined $sth ) { die("Cannot prepare statement in getNewEvents: $DBI::errstr\n") }
-    $sth->execute;
-
-    # parse items of events stored in DB
-    while (my @result = $sth->fetchrow()) {
-      $id 		= $result[0];
-      $hostname		= $result[1];
-      $service		= $result[2];
-      $detected 	= $result[3];
-      $type 		= $result[5];
-      $source_type 	= $result[6];
-      $source	 	= $result[7];
-      $target_proto	= $result[8];
-      $target_port 	= $result[9];
-      $attack_scale 	= $result[10];
-      $note 		= $result[11];
-      $priority 	= $result[12];
-      $timeout	 	= $result[13];
-
-      # create SOAP data object
-      $event = SOAP::Data->name(event => \SOAP::Data->value(
-        SOAP::Data->name(ID		=> $id),
-        SOAP::Data->name(HOSTNAME	=> $hostname),
-        SOAP::Data->name(SERVICE	=> $service),
-        SOAP::Data->name(DETECTED	=> $detected),
-        SOAP::Data->name(TYPE		=> $type),
-        SOAP::Data->name(SOURCE_TYPE	=> $source_type),
-        SOAP::Data->name(SOURCE		=> $source),
-        SOAP::Data->name(TARGET_PROTO	=> $target_proto),
-        SOAP::Data->name(TARGET_PORT	=> $target_port),
-        SOAP::Data->name(ATTACK_SCALE	=> $attack_scale),
-        SOAP::Data->name(NOTE		=> $note),
-        SOAP::Data->name(PRIORITY	=> $priority),
-        SOAP::Data->name(TIMEOUT	=> $timeout)
-      ));
-      push(@events, $event);
-      push(@ids, $id);
-    }
-
-    # log sent ID of events
-    if (scalar(@events)!=0) {
-      write2log("info", "Sent events with ID: [@ids] to $IP ($CN)");
-    }
-    return @events;
-  }
-} # END of getNewEvents
-
-
-#-----------------------------------------------------------------------------
-# getLastId - get lastest saved event ID
-#-----------------------------------------------------------------------------
-sub getLastId
-{
-  my ($class, $arg) = @_;
-
-  my $sth = $DBH->prepare("SELECT max(id) FROM events;");
-  if ( !defined $sth ) { die("Cannot prepare statement in getLastId: $DBI::errstr\n") }
-  $sth->execute;
-  my $result = $sth->fetchrow();
-  return $result;
-} # END of getLastID
-
-
-#-----------------------------------------------------------------------------
-# registerSender - register new sender
-#-----------------------------------------------------------------------------
-sub registerSender
-{
-  my ($class, $data) = @_;
-
-  my $sth;
-  our $IP;
-  our $LOCAL_IP;
-  our $CN;
-
-  if ($LOCAL_IP ne $IP) {
-    write2log ("err", "Unauthorized access to registerSender from: $IP ($CN) - access allowed only from localhost");
-    die("Access denied - access allowed only from localhost!");
-  } else {
-    # defined variables by server
-    my $client_type 		= "s";
-    my $client_type_db 		= $DBH->quote($client_type);
-    my $registered 		= DateTime->now;
-    my $registered_db 		= $DBH->quote($registered);
-    my $type			= "null";
-    my $type_db			= $DBH->quote($type);
-    my $receive_own_events	= "null";
-    my $receive_own_events_db	= $DBH->quote($receive_own_events);
-
-    # parse SOAP data oject
-    my $hostname		= $data->{'HOSTNAME'};
-    my $hostname_db		= $DBH->quote($hostname);
-    my $requestor		= $data->{'REQUESTOR'};
-    my $requestor_db		= $DBH->quote($requestor);
-    my $service			= $data->{'SERVICE'};
-    my $service_db		= $DBH->quote($service);
-    my $description_tags	= $data->{'DESCRIPTION_TAGS'};
-    my $description_tags_db	= $DBH->quote($description_tags);
-    my $ip_net_client		= $data->{'IP_NET_CLIENT'};
-    my $ip_net_client_db	= $DBH->quote($ip_net_client);
-
-    # check if sender has been already registered
-    $sth = $DBH->prepare("SELECT registered FROM clients WHERE hostname = $hostname_db AND requestor = $requestor_db AND service = $service_db AND client_type = $client_type_db AND type = $type_db AND receive_own_events = $receive_own_events_db AND description_tags = $description_tags_db AND ip_net_client = $ip_net_client_db;");
-    if ( !defined $sth ) {die("Cannot prepare check statement in registerSender: $DBI::errstr\n")}
-    $sth->execute;
-    my $result = $sth->fetchrow();
-
-    # register new sender
-    if (defined $result) {
-      write2log ("err", "Attempt to re-register the sender");
-      die("Error - sender has already been registered at $result");
-    } else {
-      $DBH->do("INSERT INTO clients VALUES (null,$hostname_db,$registered_db,$requestor_db,$service_db,$client_type_db,$type_db,$receive_own_events_db,$description_tags_db,$ip_net_client_db);");
-      if ($DBH->err()) {die("Cannot do statement in registerSender: $DBI::errstr\n")}
-      $DBH->commit();
-      write2log("info", "New sender $hostname (service: $service, cidr: $ip_net_client) was registered");
-      return 1;
-    }
-  }
-} # END of registerSender
-
-
-#-----------------------------------------------------------------------------
-# registerReceiver - register new receiver
-#-----------------------------------------------------------------------------
-sub registerReceiver
-{
-  my ($class, $data) = @_;
-
-  my $sth;
-  our $IP;
-  our $LOCAL_IP;
-  our $CN;
-
-  if ($LOCAL_IP ne $IP) {
-    write2log ("err", "Unauthorized access to registerReceiver from: $IP ($CN) - access allowed only from localhost");
-    die("Access denied - access allowed only from localhost!");
-  } else {
-    # variables defined by server  
-    my $client_type		= "r";
-    my $client_type_db		= $DBH->quote($client_type);
-    my $registered 		= DateTime->now;
-    my $registered_db 		= $DBH->quote($registered);
-    my $service			= "null";
-    my $service_db		= $DBH->quote($service);
-    my $description_tags	= "null";
-    my $description_tags_db	= $DBH->quote($description_tags);
-
-    # parse SOAP data oject
-    my $hostname		= $data->{'HOSTNAME'};
-    my $hostname_db		= $DBH->quote($hostname);
-    my $requestor		= $data->{'REQUESTOR'};
-    my $requestor_db		= $DBH->quote($requestor);
-    my $type			= $data->{'TYPE'};
-    my $type_db			= $DBH->quote($type);
-    my $receive_own_events	= $data->{'RECEIVE_OWN_EVENTS'};
-    my $receive_own_events_db	= $DBH->quote($receive_own_events);
-    my $ip_net_client		= $data->{'IP_NET_CLIENT'};
-    my $ip_net_client_db	= $DBH->quote($ip_net_client);
-
-    # check if receiver has been already registered
-    $sth = $DBH->prepare("SELECT registered FROM clients WHERE hostname = $hostname_db AND requestor = $requestor_db AND service = $service_db AND client_type = $client_type_db AND type = $type_db AND receive_own_events = $receive_own_events_db AND description_tags = $description_tags_db AND ip_net_client = $ip_net_client_db;");
-    if ( !defined $sth ) {die("Cannot prepare check statement in registerReceiver: $DBI::errstr\n")}
-    $sth->execute;
-    my $result = $sth->fetchrow();
-
-    # register new receiver
-    if (defined $result) {
-      write2log ("err", "Attempt to re-register the receiver");
-      die("Error - receiver has already been registered at $result");
-    } else {
-      $DBH->do("INSERT INTO clients VALUES (null,$hostname_db,$registered_db,$requestor_db,$service_db,$client_type_db,$type_db,$receive_own_events_db,$description_tags_db,$ip_net_client_db);");
-      if ($DBH->err()) {die("Cannot do statement in registerReceiver: $DBI::errstr\n")}
-      $DBH->commit();
-      write2log("info", "New receiver $hostname (type: $type, cidr: $ip_net_client: receive_own_events: $receive_own_events) was registered");
-      return 1;
-    }
-  }
-} # END of registerReceiver
-
-
-#-----------------------------------------------------------------------------
-# unregisterClient - unregister client
-#-----------------------------------------------------------------------------
-sub unregisterClient
-{
-  my ($class, $data) = @_;
-
-  my $sth;
-  our $IP;
-  our $LOCAL_IP;
-  our $CN;
-
-  if ($LOCAL_IP ne $IP) {
-    write2log ("err", "Unauthorized access to unregisterClients from: $IP ($CN) - access allowed only from localhost");
-    die("Access denied - access allowed only from localhost!");
-  } else {
-    # parse SOAP data oject
-    my $client_id	= $data->{'CLIENT_ID'};
-    my $client_id_db	= $DBH->quote($client_id);
-
-    # check if receiver has been already registered
-    $sth = $DBH->prepare("SELECT client_id, hostname, service, client_type FROM clients WHERE client_id = $client_id_db;");
-    if ( !defined $sth ) {die("Cannot prepare check statement in unregisterClient: $DBI::errstr\n")}
-    $sth->execute;
-    my ($id, $hostname, $service, $client_type) = $sth->fetchrow();
-    my $hostname_db	= $DBH->quote($hostname);
-    my $service_db	= $DBH->quote($service);
-
-    # delete registered client
-    if (!defined $id) {
-      write2log ("err", "Attempt to delete unregister client");
-      die("Error - client (#$client_id) is not registered");
-    } else {
-      if ($client_type eq 's') {
-        $DBH->do("DELETE FROM clients WHERE client_id = $client_id_db;");
-        if ($DBH->err()) {die("Cannot do delete statement of sender in unregisterClient: $DBI::errstr\n")}
-        $DBH->commit();
-
-        $DBH->do("UPDATE events SET valid = 'f' where hostname = $hostname_db AND service = $service_db;");
-        if ($DBH->err()) {die("Cannot do unvalidation statement in unregisterClient: $DBI::errstr\n")}
-        $DBH->commit();
-
-        write2log("info", "Sender $hostname (client_id: $client_id, service: $service) was deleted and its data were invalidated" );
-        return 1;
-      } else {
-        $DBH->do("DELETE FROM clients WHERE client_id = $client_id_db;");
-        if ($DBH->err()) {die("Cannot do delete statement of receiver in unregisterClient: $DBI::errstr\n")}
-        $DBH->commit();
-        write2log("info", "Receiver $hostname (client_id: $client_id) was deleted" );
-        return 1;
-      }
-    }
-  }
-} # END of unregisterClient
-
-
-#-----------------------------------------------------------------------------
-# getClients -  get list of clients which were registered at warden server
-#-----------------------------------------------------------------------------
-sub getClients
-{
-  my ($class, $arg) = @_;
-
-  our $IP;
-  our $LOCAL_IP;
-  our $CN;
-
-  if ($LOCAL_IP ne $IP) {
-    write2log ("err", "Unauthorized access to getClients from: $IP ($CN) - access allowed only from localhost");
-    die("Access denied - access allowed only from localhost!");
-  } else {
-    my (@clients, $client);
-    my ($client_id, $hostname, $registered, $requestor, $service, $client_type, $type, $receive_own_events, $description_tags, $ip_net_client);
-    my $sth = $DBH->prepare("SELECT * FROM clients;");
-    if (!defined $sth) { die("Cannot prepare statement in getClients: $DBI::errstr\n") }
-    $sth->execute;
-
-    while ( my @result = $sth->fetchrow() ) {
-      $client_id		= $result[0];
-      $hostname			= $result[1];
-      $registered		= $result[2];
-      $requestor		= $result[3];
-      $service			= $result[4];
-      $client_type 		= $result[5];
-      $type 			= $result[6];
-      $receive_own_events	= $result[7];
-      $description_tags		= $result[8];
-      $ip_net_client		= $result[9];
-
-      $client = SOAP::Data->name(client => \SOAP::Data->value(
-      SOAP::Data->name(CLIENT_ID		=> $client_id),
-      SOAP::Data->name(HOSTNAME			=> $hostname),
-      SOAP::Data->name(REGISTERED		=> $registered),
-      SOAP::Data->name(REQUESTOR		=> $requestor),
-      SOAP::Data->name(SERVICE			=> $service),
-      SOAP::Data->name(CLIENT_TYPE		=> $client_type),
-      SOAP::Data->name(TYPE			=> $type),
-      SOAP::Data->name(RECEIVE_OWN_EVENTS	=> $receive_own_events),
-      SOAP::Data->name(DESCRIPTION_TAGS		=> $description_tags),
-      SOAP::Data->name(IP_NET_CLIENT		=> $ip_net_client),
-      ));
-      push(@clients, $client);
-    }
-    my $sum = scalar @clients;
-    write2log("info", "Sending information about $sum registered clients");
-    return @clients;
-  }
-} # END of getClients
-
-
-#-----------------------------------------------------------------------------
-# getStatus - get list of status items of warden server
-#-----------------------------------------------------------------------------
-sub getStatus
-{
-  my ($class, $arg) = @_;
-
-  our $IP;
-  our $LOCAL_IP;
-  our $CN;
-
-  if ($LOCAL_IP ne $IP) {
-    write2log ("err", "Unauthorized access to getStatus from: $IP ($CN) - access allowed only from localhost");
-    die("Access denied - access allowed only from localhost!");
-  } else {
-    my ($sth, @status);
-
-    # size of database events
-    my $db_size = Format::Human::Bytes::base10(-s $db);
-
-    # sum of records in table events
-    $sth = $DBH->prepare("SELECT count(*) FROM events;");
-    if (!defined $sth) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-    $sth->execute;
-    my $events_sum = $sth->fetchrow();
-    if (!defined $events_sum) { $events_sum = "none" }
-
-    # id of last record in table events
-    $sth = $DBH->prepare("SELECT max(id) FROM events;");
-    if (!defined $sth) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-    $sth->execute;
-    my $events_last_id = $sth->fetchrow();
-    if (!defined $events_last_id) { $events_last_id = "none" }
-
-    # timestamp of first record in table events
-    $sth = $DBH->prepare("SELECT received FROM events WHERE id = (SELECT min(id) FROM events);");
-    if (!defined $sth) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-    $sth->execute;
-    my $events_first_timestamp = $sth->fetchrow();
-    if (!defined $events_first_timestamp) { $events_first_timestamp = "none" }
-
-    # timestamp of last record in table events
-    $sth = $DBH->prepare("SELECT received FROM events WHERE id = (SELECT max(id) FROM events);");
-    if (!defined $sth) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-    $sth->execute;
-    my $events_last_timestamp = $sth->fetchrow();
-    if (!defined $events_last_timestamp) { $events_last_timestamp = "none" }
-
-    # sum of records in table clients
-    $sth = $DBH->prepare("SELECT count(*) FROM clients;");
-    if (!defined $sth) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-    $sth->execute;
-    my $clients_sum = $sth->fetchrow();
-    if (!defined $clients_sum) { $clients_sum = "none" }
-
-    my $server_status = SOAP::Data->name(server_status => \SOAP::Data->value(
-      SOAP::Data->name(VERSION			=> $VERSION),
-      SOAP::Data->name(ADDRESS			=> $ADDRESS),
-      SOAP::Data->name(PORT			=> $PORT),
-      SOAP::Data->name(LOGDIR			=> $LOGDIR),
-      SOAP::Data->name(PIDDIR			=> $PIDDIR),
-      SOAP::Data->name(VARDIR			=> $VARDIR),
-      SOAP::Data->name(SSL_KEY_FILE		=> $SSL_KEY_FILE),
-      SOAP::Data->name(SSL_CERT_FILE		=> $SSL_CERT_FILE),
-      SOAP::Data->name(SSL_CA_FILE		=> $SSL_CA_FILE),
-      SOAP::Data->name(FACILITY			=> $FACILITY),
-      SOAP::Data->name(DB_SIZE			=> $db_size),
-      SOAP::Data->name(EVENTS_SUM		=> $events_sum),
-      SOAP::Data->name(EVENTS_LAST_ID		=> $events_last_id),
-      SOAP::Data->name(EVENTS_FIRST_TIMESTAMP	=> $events_first_timestamp),
-      SOAP::Data->name(EVENTS_LAST_TIMESTAMP	=> $events_last_timestamp),
-      SOAP::Data->name(CLIENTS_SUM		=> $clients_sum)
-    ));
-    push(@status, $server_status);
-
-    # statistics of senders
-    if ($clients_sum != 0) {
-      $sth = $DBH->prepare("SELECT client_id, hostname, service FROM clients WHERE client_type = 's';");
-      if (!defined $sth) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-      $sth->execute;
-      my ($client_id, $hostname, $service);
-      my $client_status;
-      while(($client_id, $hostname, $service) = $sth->fetchrow()) {
-	my $hostname_db = $DBH->quote($hostname);
-	my $service_db = $DBH->quote($service);
-        my $sth2;
-        # sum of stored events
-        $sth2 = $DBH->prepare("SELECT count(*) FROM events WHERE hostname = $hostname_db AND service = $service_db;");
-        if ( !defined $sth2 ) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-        $sth2->execute;
-        my $count = $sth2->fetchrow();
-        if (!defined $count) {$count = "none"}
-        # timestamp of last stored event 
-        $sth2 = $DBH->prepare("SELECT max(received) FROM events WHERE hostname = $hostname_db AND service = $service_db;");
-        if ( !defined $sth2 ) { die("Cannot prepare statement in getStatus: $DBI::errstr\n") }
-        $sth2->execute;
-        my $timestamp = $sth2->fetchrow();
-        if (!defined $timestamp) { $timestamp = "none" }
-        # create SOAP data object
-        $client_status = SOAP::Data->name(client_status => \SOAP::Data->value(
-          SOAP::Data->name(CLIENT_ID	=> $client_id),
-          SOAP::Data->name(HOSTNAME	=> $hostname),
-          SOAP::Data->name(SERVICE	=> $service),
-          SOAP::Data->name(COUNT	=> $count),
-          SOAP::Data->name(TIMESTAMP	=> $timestamp),
-        ));
-	push(@status, $client_status);
-      }
-    }
-    write2log("info", "Sent of warden server status info");
-    return @status;
-  }
-} # END of getStatus
-
-
-
-################################################################################
-#				MAIN warden-server
-################################################################################
-
-#-------------------------------------------------------------------------------
-# Superuser controle
-#-------------------------------------------------------------------------------
-my $UID = $<;
-if ($UID != 0) {
-  die errMsg("You must be root for running this script!")
-}
-
-#-------------------------------------------------------------------------------
-# Daemonize section
-#-------------------------------------------------------------------------------
-use POSIX qw(setsid);
-chdir '/';
-umask 0;
-# all stderr messages are situated in warden-server-error.log
-#open STDERR, '/dev/null' or die errMsg("Can't write to /dev/null: $!");
-open STDIN, '/dev/null' or die errMsg("Can't read /dev/null: $!");
-open STDOUT, '/dev/null' or die errMsg("Can't write to /dev/null: $!");
-defined( my $pid = fork ) or die errMsg("Can't fork: $!");
-exit if $pid;
-
-#-------------------------------------------------------------------------------
-# Dissociate this process from the controlling terminal
-# that started it and stop being part of whatever
-# process group this process was a part of.
-#------------------------------------------------------------------------------
-POSIX::setsid() or die errMsg("Can't start a new session.");
-
-#-------------------------------------------------------------------------------
-# Callback signal handler for signals.
-#-------------------------------------------------------------------------------
-$SIG{INT} = $SIG{TERM} = $SIG{HUP} = \&signalHandler;
-$SIG{PIPE} = 'ignore';
-
-#-------------------------------------------------------------------------------
-# Create pid file in /var/run/
-#-------------------------------------------------------------------------------
-my $pfh = File::Pid->new( { file => $pid_file, } );
-$pfh->write or die errMsg("Can't write PID file $pid_file: $!");
-my $pid_number = $pfh->pid;
-
-#-------------------------------------------------------------------------------
-# 			Starting of Warden server
-#-------------------------------------------------------------------------------
-write2log("info", "Starting WARDEN server daemon with pid $pid_number");
-
-# log of warden database size
-my $db_size_human = Format::Human::Bytes::base10(-s $db);
-write2log("info", "Size of DB file ($db_file) is: $db_size_human");
-
-# start TCP server
-my $server = SOAP::Transport::TCP::Server
-  ->new(
-    Listen		=> 5,
-    LocalAddr		=> $ADDRESS,
-    LocalPort		=> $PORT,
-    Proto		=> "tcp",
-    ReuseAddr		=> 1,
-    SSL_verify_mode	=> 0x03,
-    SSL_use_cert	=> 1,
-    SSL_server		=> 1,
-    SSL_key_file	=> $SSL_KEY_FILE,
-    SSL_cert_file	=> $SSL_CERT_FILE,
-    SSL_ca_file 	=> $SSL_CA_FILE,
-    SSL_error_trap	=>\&sslErrorHandler,
-  );
-
-# check if socket exist
-$server or die errMsg("Socket error: $!");
-
-# start SOAP server
-my $soap = SOAP::Server
-  ->new()
-  ->dispatch_to('Warden');
-
-
-#-------------------------------------------------------------------------------
-# Process of incoming client's requests and send response
-#-------------------------------------------------------------------------------
-write2log("info", "Starting TCP and SOAP server at $ADDRESS:$PORT");
-while ($die_now != 1)
-{
-  my $socket = $server->accept();
-  next if (!$socket);
-  our $CN = $socket->peer_certificate("cn");
-  our $IP = $socket->peerhost;
-  our $LOCAL_IP = $socket->sockhost;
-
-  # read input serialized SOAP envelope and data
-  my ($request, $buf);
-  while (defined($buf = <$socket>))
-  {
-    $request .= $buf;
-  }
-
-  # handle of called server function from client and send response to client
-  my $response = $soap->handle($request);
-  print $socket $response;
-
-  $socket->close;
-  undef($socket);
-  undef($CN);
-}
-
-
-
-################################################################################
-#				Cleanup section
-################################################################################
-END {
-  if ($die_now == 1)
-  {
-    my $pid = trim(`cat $pid_file`);
-    write2log("info", "Stopping WARDEN server daemon with pid $pid");
-
-    # close connection to DB
-    $DBH->disconnect();
-
-    # remove pid file
-    $pfh->remove if defined $pfh;
-  }
-}

src/warden-server/bin/wardend

-#!/bin/bash
-#
-# wardend
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-### BEGIN INIT INFO
-# Provides:          	wardend
-# Required-Start:    	$local_fs $network $syslog $time
-# Required-Stop:     	$local_fs $syslog $time
-# Default-Start:     	2 3 4 5
-# Default-Stop:      
-# Short-Description: 	Start the Warden server
-# Description:       	Starts or stops server for exchange of events
-#			among CSIRT teams 
-### END INIT INFO
-
-VERSION="1.0"
-
-DAEMON="/opt/warden-server/bin/warden-server.pl"
-PID_FILE="/var/run/warden-server.pl.pid"
-LOCK_FILE="/var/lock/warden-server"
-SCRIPTNAME=`basename "$0"`
-
-# check if daemon is present and executable
-test -x $DAEMON || exit 0
-
-if [ $UID -ne 0 ]; then
-	echo "You must be root for runnnig this script!"
-	exit 1
-fi
-
-usage() {
-	echo "Usage: $0 [start|stop|status|restart|force-stop]"
-	exit 1
-}
-
-check_status() {
-	/bin/ps axo pid,comm | grep -q "warden-server*"; RET_VAL=`echo $?`
-	if [ $RET_VAL -eq 0 ]; then
-		STATUS=1	# true  - warden is running
-	else
-		STATUS=0	# false - warden is not running
-	fi
-}
-
-get_pid() {
-	PID=`ps axo pid,comm | grep "warden-server*" | sed 's/^ \{1,4\}//g' | cut -f 1 -d " "`
-	return $PID
-}
-
-warden_start() {
-	check_status
-	if [ $STATUS -eq 1 ]; then
-		get_pid PID
-		echo "Warden daemon is running (pid $PID)."
-	else
-		logger -s "Starting Warden server daemon ..."
-		$DAEMON
-		touch $LOCK_FILE
-	fi
-}
-
-warden_stop() {
-	check_status
-	if [ $STATUS -eq 1 ]; then
-		logger -s "Stopping Warden server daemon ..."
-		if [ -e $PID_FILE ]; then
-			PID=`cat $PID_FILE`
-			kill -1 $PID
-			rm -f $LOCK_FILE
-		else
-			echo "Unable to stop Warden server daemon. Try to use: $SCRIPTNAME force-stop"
-		fi
-	else
-		echo "Warden daemon is NOT running."
-	fi
-}
-
-warden_status() {
-	check_status
-	if [ $STATUS -eq 1 ]; then
-		get_pid PID
-		echo "Warden daemon is running (pid $PID)."
-	else
-		echo "Warden daemon is NOT running."
-	fi
-}
-
-warden_force_stop() {
-	check_status
-	if [ $STATUS -eq 1 ]; then
-		logger -s "Force stopping Warden server daemon ..."
-		get_pid PID
-		kill -9 $PID
-		if [ -e $PID_FILE ]; then
-			rm -f $PID_FILE
-		fi
-		rm -f $LOCK_FILE
-	else
-		echo "Warden daemon is NOT running."
-	fi
-}
-
-case $1 in
-	status)
-		warden_status
-		;;
-	start)
-		warden_start
-		;;
-	stop)
-		warden_stop
-		;;
-	force-stop)
-		warden_force_stop
-		;;
-	restart)
-		$0 stop
-		sleep 1
-		$0 start
-		;;
-	*)
-		usage
-		;;
-esac
-
-exit 0

src/warden-server/doc/CHANGELOG

-2012-01-31 v1.0.0 stable version
---------------------------------
-- initial package of warden server
-- SSL certificate authentication/authorization supported
-- automatized installation process

src/warden-server/doc/INSTALL

-For installation of warden-server on local machine use install.sh.
-  
-Default destination directory is /opt/warden-server/.
-          
-For more information about install.sh options run install.sh -h.
-
-You must be root for running this script.

src/warden-server/doc/README

-+------------------------------+
-| README - Warden Server 1.0.0 |
-+------------------------------+
-
-Content
-
- A. Overall Information
- B. Installation Dependencies
- C. Installation
- D. Configuration
- E. Update
- F. Init Scripts
- G. Registration of Clients
- H. Status Info
- I. Nagios Integration
- J. Authors
-
---------------------------------------------------------------------------------
-A. Overall Information
-
- 1. About Warden Client
- 
-    Warden is a client-based architecture service designed to share detected
-    security issues (events) among CSIRT and CERT teams in a simple and fast way.
-    
-    This package offers full server functionality to both install and maintain
-    Warden server and to register and/or unregister particular clients.
-
- 2. Version
-  
-    1.0.0 (2012-01-31)
-    
- 3. Package structure
- 
-    warden-server/
-      bin/
-        getClients.pl
-	getStatus.pl
-	registerReceiver.pl
-	registerSender.pl
-	unregisterClients.pl
-	warden-alive
-	wardend
-	warden-server.pl
-      doc/
-        CHANGELOG
-	INSTALL
-	LICENSE
-	README
-      etc/
-        warden-client.conf
-	warden-server.conf
-      lib/
-        WardenConf.pm
-        WardenReg.pm
-        WardenStatus.pm  
-      sh/
-        create_table
-	install
-	update
-
---------------------------------------------------------------------------------
-B. Installation Dependencies
- 
- /*TODO*/Zkontrolovat, zdali plati...
-
-    Perl 5.10.1  
-    SOAP::Lite
-    IO::Socket::SSL
-    SOAP::Transport::TCP
-    FindBin
-
---------------------------------------------------------------------------------
-C. Installation
-
-  /*TODO*/Zkontrolovat, co z klienta plati i pro server a doplnit chybejici...
-
- 1. Check SHA1 checksum of corresponding Warden client package archive
-
-    $ sha1sum -c warden-client-1.0.0.tar.gz.sig
-
- 2. Untar it
-
-    $ tar xzvf warden-client-1.0.0.tar.gz
-
- 3. Run install.sh 
-  
-    Default destination directory is /opt/warden-client/
-    
-    For more information about install.sh options run install.sh -h
-
-    You must be root for running this script.
-
- 4. Installation Privileges
-
-    Warden-client is designed to be run under standard privileges. It should be
-    part of other applications run under usual user privileges. However
-    warden-client uses SSL certificates for security purposes which are often 
-    not accessible by standard users.
-
-    To solve this issue warden-client should be install under root privileges.
-    It copyies local SSL key and certificate files into warden-client/etc
-    folder where those are accessible even with standard privileges.
-
-    Should any user want to preserve standard location of certificate files,
-    he or she is advised to remove key and certificate files after installation
-    from /warden-client/etc/ and manually edit paths to certificate files in
-    warden-client/etc/warden-client.conf. In most cases, this change will force
-    warden-client to be run under root privileges though.
-
- 5. Configuration file
-  
-    You are advised to check configuration file
-    warden-client/etc/warden-client.conf. After installation.
-    
-    SOAP protocol is used for handling communication between server and clients.
-    Therefore, correct URI of Warden server must be set.
-
-    Authentication of clients and server is performed using client and server
-    SSL certificates. Both clients and server must have valid certificate.
-
-    Configuration file contains following parameters:
-
-    URI 	  - URI Warden server
-          	    e.g. 'https://warden-dev.cesnet.cz:443/Warden'
-
-    SSL_KEY_FILE  - path to a host key file,
-    	    	    e.g. '/opt/warden-client/etc/warden-dev.cesnet.cz.key'
-
-    SSL_CERT_FILE - path to a host certificate file,
-     		    e.g. '/opt/warden-client/etc/warden-dev.cesnet.cz.pem'
-
-    SSL_CA_FILE   - path to a CA file
-                    e.g. '/etc/ssl/certs/tcs-ca-bundle.pem' 
-
- 6. Usage of install.sh
-
-    Usage: $ ./install.sh [-d <directory>] [-u <user>] [-k <ssl_key_file>]
-                          [-c <ssl_cert_file>] [-a <ssl_ca_file>] [-hV]"
-	-d <directory>            installation directory (default: /opt)
-	-u <user>                 owner of warden client package (user for
-				  running detection scripts)
-	-k <ssl_key_file>         SSL certificate key file path
-	-c <ssl_cert_file>        SSL certificate file path
-	-a <ssl_ca_file>          CA certificate file path
-	-h                        print this help
-	-V                        print script version number and exit
-	
-    Example: $ ./install.sh -d /opt -u detector -k /etc/ssl/private/client.key
- 
---------------------------------------------------------------------------------
-D. Configuration
-
-  /*TODO*/Doplnit konfiguraci (warden.conf) - mozna to v klientske verzi
-  zasahuje do predchozi sekce, zkontrolovat
-
---------------------------------------------------------------------------------       
-E. Update
- 
- /*TODO*/Doplnit, jak se dela update...
-
-   To upgrade a client, install a new version.
-
---------------------------------------------------------------------------------
-F. Init Scripts
-
-  /*TODO*/Doplnit init scripty
-
- 1. Start
-
-    /*TODO*/Doplnit...
-
- 2. Stop
-
-    /*TODO*/Doplnit...
-
- 3. Restart
-
-    /*TODO*/Doplnit...
-
- 4. Status
-
-    /*TODO*/Doplnit...
-
- 5. Force-stop
-
-    /*TODO*/Doplnit...
-
---------------------------------------------------------------------------------
-G. Registration of Clients
-
-  /*TODO*/Popsat registraci klientu
-
- 1. Register Sender
-
-    New sender clients are registered in Warden system via
-    warden-server/bin/registerSender.pl.
-    
-    Following attributes must be provided in order to register new client
-    successfully:
-    
-    hostname          - hostname of the client,
-    requestor         - organization or authorized person who demands new
-                        client registration, 
-    service           - name of the service of a new registered client,
-    description_tags  - tags describing the nature of the service,
-    ip_net_client     - CIDR the client is only allowed to communicate from.
-
-    One can always run registerSender.pl with -h argument to see a help.
-
- 2. Register Receiver
-
-   /*TODO*/Doplnit...
-
- 3. Unregister Client
-
-   /*TODO*/Doplnit...
-
---------------------------------------------------------------------------------
-H. Status Info
-
-  /*TODO*/Popsat praci s administrativnimi/dohledovymi funkcemi
-
-  1. Get Status
-
-     /*TODO*/Doplnit...
-
-  2. Get Clients
-
-     /*TODO*/Doplnit...
-
---------------------------------------------------------------------------------
-I. Nagios Integration
-
-  Nagios controll is available via Nagios plugin located in
-  /opt/warden-server/bin/warden-alive.
-
---------------------------------------------------------------------------------
-J. Authors
-
-Development:	Tomas PLESNIK   <plesnik@ics.muni.cz>
-		Jan SOUKAL      <soukal@ics.muni.cz>
-
-Copyright (C) 2012 Cesnet z.s.p.o
-
-Special thanks go to Martin Drasar from CSIRT-MU for his help and support
-in the development of Warden system.
-
-

src/warden-server/etc/warden-client.conf

-#
-# warden-client.conf - configuration file for registration and status clients
-#
-
-#-------------------------------------------------------------------------------
-# URI - URI address of Warden server
-#-------------------------------------------------------------------------------
-$URI = "https://warden-dev.cesnet.cz:443/Warden";
-
-#-------------------------------------------------------------------------------
-# SSL_KEY_FILE - path to server SSL certificate key file
-#-------------------------------------------------------------------------------
-$SSL_KEY_FILE = "/etc/ssl/private/warden-dev.cesnet.cz.key";
-
-#-------------------------------------------------------------------------------
-# SSL_CERT_FILE - path toserver SSL certificate file
-#-------------------------------------------------------------------------------
-$SSL_CERT_FILE = "/etc/ssl/certs/warden-dev.cesnet.cz.pem";
-
-#-------------------------------------------------------------------------------
-# SSL_CA_FILE - path to CA certificate file
-#-------------------------------------------------------------------------------
-$SSL_CA_FILE = "/etc/ssl/certs/tcs-ca-bundle.pem";

src/warden-server/etc/warden-server.conf

-# 
-# warden-server.conf - configuration file for Warden server
-#
-
-#-------------------------------------------------------------------------------
-# ADDRESS - IP address of warden server
-#-------------------------------------------------------------------------------
-$ADDRESS = "warden-dev.cesnet.cz";
-
-#-------------------------------------------------------------------------------
-# PORT - used TCP port for Warden server
-#-------------------------------------------------------------------------------
-$PORT = "443";
-
-#-------------------------------------------------------------------------------
-# BASEDIR - base directory of Warden server
-#-------------------------------------------------------------------------------
-$BASEDIR = "/opt/warden-server";
-
-#-------------------------------------------------------------------------------
-# VARDIR - var directory
-#-------------------------------------------------------------------------------
-$VARDIR = "$BASEDIR/var/";
-
-#-------------------------------------------------------------------------------
-# LOGDIR - logging directory
-#-------------------------------------------------------------------------------
-$LOGDIR = "/var/log/";
-
-#-------------------------------------------------------------------------------
-# PIDDIR - process ID directory
-#-------------------------------------------------------------------------------
-$PIDDIR = "/var/run/";
-
-#-------------------------------------------------------------------------------
-# SSL_KEY_FILE - path to server SSL certificate key file
-#-------------------------------------------------------------------------------
-$SSL_KEY_FILE = "/etc/ssl/private/warden-dev.cesnet.cz.key";
-
-#-------------------------------------------------------------------------------
-# SSL_CERT_FILE - path to server SSL certificate file
-#-------------------------------------------------------------------------------
-$SSL_CERT_FILE = "/etc/ssl/certs/warden-dev.cesnet.cz.pem";
-
-#-------------------------------------------------------------------------------
-# SSL_CA_FILE - path to CA ceritificate file
-#-------------------------------------------------------------------------------
-$SSL_CA_FILE = "/etc/ssl/certs/tcs-ca-bundle.pem";
-
-#-------------------------------------------------------------------------------
-# FACILITY - syslog facility
-#-------------------------------------------------------------------------------
-$FACILITY = "local7";

src/warden-server/lib/WardenConf.pm

-#!/usr/bin/perl -w
-#
-# WardenConf.pm
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-#
-
-package WardenConf;
-
-use strict;
-
-our $VERSION = "1.0";
-
-#-------------------------------------------------------------------------------
-# loadConf - load variables from configuration file
-#-------------------------------------------------------------------------------
-sub loadConf
-{
-  my $conf_file = shift;
-
-  # preset of default variables
-  our $URI = undef;
-  our $SSL_KEY_FILE = undef;
-  our $SSL_CERT_FILE = undef;
-  our $SSL_CA_FILE = undef;
-
-  # read config file
-  if ( ! open( TMP, $conf_file) ) {
-    die "Can't read config file '$conf_file': $!\n";
-  }
-  close TMP;
-
-  # load set variables by user
-  if ( !do $conf_file ) {
-    die("Errors in config file '$conf_file': $@");
-  }
-
-  return ($URI, $SSL_KEY_FILE, $SSL_CERT_FILE, $SSL_CA_FILE);
-
-} # End of loadConf
-1;

src/warden-server/lib/WardenReg.pm

-#!/usr/bin/perl -w
-#
-# WardenReg.pm
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-package WardenReg;
-
-use strict;
-use SOAP::Lite;
-use IO::Socket::SSL qw(debug1);
-use SOAP::Transport::TCP;
-
-our $VERSION = "1.0";
-
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  die($msg . "\n");
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# c2s - connect to server, send request and receive response
-#-------------------------------------------------------------------------------
-sub c2s 
-{
-  my $uri		= shift;
-  my $ssl_key_file	= shift;
-  my $ssl_cert_file	= shift;
-  my $ssl_ca_file	= shift;
-  my $method		= shift;
-  my $data		= shift;
-
-  my $client;
-  my ($server, $port, $service) = $uri =~ /https:\/\/(.+)\:(\d+)\/(.+)/;
-  if (!($client = SOAP::Transport::TCP::Client->new(
-    PeerAddr            => $server,
-    PeerPort            => $port,
-    Proto               => 'tcp',
-    SSL_use_cert        => 1,
-    SSL_verify_mode     => 0x02,
-    SSL_key_file        => $ssl_key_file,
-    SSL_cert_file       => $ssl_cert_file,
-    SSL_ca_file         => $ssl_ca_file,
-  ))) {errMsg("Sorry, unable to create socket: " . &SOAP::Transport::TCP::Client::errstr)}
-
-  # setting of URI and serialize SOAP envelope and data object
-  my $soap     = SOAP::Lite->uri($uri);
-  my $envelope = $soap->serializer->envelope(method => $method, $data);
-
-  # setting of TCP URI and send serialized SOAP envelope and data
-  my $tcp_uri = "tcp://$server:$port/$service";
-  my $result = $client->send_receive(envelope => $envelope, endpoint => $tcp_uri);
-
-  # check server response
-  if (!defined $result) {
-    errMsg("Error: server returned empty response." . "\n" . "Problem with used SSL ceritificates or Warden server at $server:$port is down.");
-  } else {
-    # deserialized response from server -> create SOAP envelope and data object
-    my $response = $soap->deserializer->deserialize($result);
-    # check SOAP fault status
-    $response->fault ? errMsg("Server sent error message:: " . $response->faultstring) : return 1;
-  }
-}
-
-#-------------------------------------------------------------------------------
-# registerSender - register new warden sender
-#-------------------------------------------------------------------------------
-sub registerSender
-{
-  my $warden_path	= shift;
-  my $hostname		= shift;
-  my $requestor		= shift;
-  my $service		= shift;
-  my $description_tags	= shift;
-  my $ip_net_client	= shift;
-
-  my $etcdir = $warden_path . "/etc/";
-  my $libdir = $warden_path . "/lib/";
-
-  # read the config file
-  require $libdir .  "WardenConf.pm";
-  my $conf_file = $etcdir . "warden-client.conf";
-  my ($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file) = WardenConf::loadConf($conf_file);
-
-  # create SOAP data obejct
-  my $request_data = SOAP::Data->name(client => \SOAP::Data->value(
-    SOAP::Data->name(HOSTNAME 		=> $hostname),
-    SOAP::Data->name(REQUESTOR		=> $requestor),
-    SOAP::Data->name(SERVICE		=> $service),
-    SOAP::Data->name(DESCRIPTION_TAGS	=> $description_tags),
-    SOAP::Data->name(IP_NET_CLIENT	=> $ip_net_client)
-  ));
-
-  my $result = c2s($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file, "registerSender", $request_data);
-  $result ? return 1 : return 0;
-
-} # End of registerSender
-
-
-#-------------------------------------------------------------------------------
-# registerReceiver - register new warden receiver
-#-------------------------------------------------------------------------------
-sub registerReceiver
-{
-  my $warden_path		= shift;
-  my $hostname			= shift;
-  my $requestor			= shift;
-  my $type			= shift;
-  my $receive_own_events	= shift;
-  my $ip_net_client		= shift;
-
-  my $etcdir = $warden_path . "/etc/";
-  my $libdir = $warden_path . "/lib/";
-
-  # read the config file
-  require $libdir .  "WardenConf.pm";
-  my $conf_file = $etcdir . "warden-client.conf";
-  my ($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file) = WardenConf::loadConf($conf_file);
-
-  # create SOAP data obejct
-  my $request_data = SOAP::Data->name(client => \SOAP::Data->value(
-    SOAP::Data->name(HOSTNAME 		=> $hostname),
-    SOAP::Data->name(REQUESTOR		=> $requestor),
-    SOAP::Data->name(TYPE		=> $type),
-    SOAP::Data->name(RECEIVE_OWN_EVENTS	=> $receive_own_events),
-    SOAP::Data->name(IP_NET_CLIENT	=> $ip_net_client)
-  ));
-
-  my $result = c2s($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file, "registerReceiver", $request_data);
-  $result ? return 1 : return 0;
-
-} # End of registerReceiver
-
-
-#-------------------------------------------------------------------------------
-# unregisterClient - unregister client from warden server
-#-------------------------------------------------------------------------------
-sub unregisterClient
-{
-  my $warden_path	= shift;
-  my $client_id		= shift;
-
-  my $etcdir = $warden_path . "/etc/";
-  my $libdir = $warden_path . "/lib/";
-
-  # read the config file
-  require $libdir .  "WardenConf.pm";
-  my $conf_file = $etcdir . "warden-client.conf";
-  my ($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file) = WardenConf::loadConf($conf_file);
-
-  # create SOAP data obejct
-  my $request_data = SOAP::Data->name(client => \SOAP::Data->value(
-    SOAP::Data->name(CLIENT_ID => $client_id)
-  ));
-
-  my $result = c2s($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file, "unregisterClient", $request_data);
-  $result ? return 1 : return 0;
-
-} # End of unregisterClient
-
-1;

src/warden-server/lib/WardenStatus.pm

-#!/usr/bin/perl -w
-#
-# WardenStatus.pm
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s): 	Tomas PLESNIK 	<plesnik@ics.muni.cz>
-#		Jan SOUKAL	<soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#     this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-package WardenStatus;
-
-use strict;
-use SOAP::Lite;
-use IO::Socket::SSL qw(debug1);
-use SOAP::Transport::TCP
-
-our $VERSION = "1.0";
-
-#-------------------------------------------------------------------------------
-# errMsg - print error message and die
-#-------------------------------------------------------------------------------
-sub errMsg
-{
-  my $msg = shift;
-  die($msg . "\n");
-} # End of errMsg
-
-
-#-------------------------------------------------------------------------------
-# c2s - connect to server, send request and receive response
-#-------------------------------------------------------------------------------
-sub c2s 
-{
-  my $uri		= shift;
-  my $ssl_key_file	= shift;
-  my $ssl_cert_file	= shift;
-  my $ssl_ca_file	= shift;
-  my $method		= shift;
-
-  my $client;
-  my ($server, $port, $service) = $uri =~ /https:\/\/(.+)\:(\d+)\/(.+)/;
-  if (!($client = SOAP::Transport::TCP::Client->new(
-    PeerAddr            => $server,
-    PeerPort            => $port,
-    Proto               => 'tcp',
-    SSL_use_cert        => 1,
-    SSL_verify_mode     => 0x02,
-    SSL_key_file        => $ssl_key_file,
-    SSL_cert_file       => $ssl_cert_file,
-    SSL_ca_file         => $ssl_ca_file,
-  ))) {errMsg("Sorry, unable to create socket: " . &SOAP::Transport::TCP::Client::errstr)}
-
-  # setting of URI and serialize SOAP envelope and data object
-  my $soap     = SOAP::Lite->uri($uri);
-  my $envelope = $soap->serializer->envelope(method => $method);
-
-  # setting of TCP URI and send serialized SOAP envelope and data
-  my $tcp_uri = "tcp://$server:$port/$service";
-  my $result = $client->send_receive(envelope => $envelope, endpoint => $tcp_uri);
-
-  # check server response
-  if (!defined $result) {
-    errMsg("Error: server returned empty response." . "\n" . "Problem with used SSL ceritificates or Warden server at $server:$port is down.");
-  } else {
-    # deserialized response from server -> create SOAP envelope and data object
-    my $response = $soap->deserializer->deserialize($result);
-    # check SOAP fault status
-    $response->fault ? errMsg("Server sent error message:: " . $response->faultstring) : return $response;
-  }
-}
-
-
-#-------------------------------------------------------------------------------
-# getClients - get list of registered clients
-#-------------------------------------------------------------------------------
-sub getClients
-{
-  my $warden_path = shift;
-
-  my $etcdir = $warden_path . "/etc/";
-  my $libdir = $warden_path . "/lib/";
-
-  # read the config file
-  require $libdir .  "WardenConf.pm";
-  my $conf_file = $etcdir . "warden-client.conf";
-  my ($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file) = WardenConf::loadConf($conf_file);
-
-  my $response = c2s($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file, "getClients");
-  # match getClients functions response
-  $response->match('/Envelope/Body/getClientsResponse/');
-
-  my $i = 1;
-  my ($client_id, $hostname, $registered, $requestor, $service, $client_type, $type, $receive_own_events, $description_tags, $ip_net_client);
-  my @clients;
-  my $response_data = $response->valueof("[$i]");
-
-  # parse returned data object
-  while (defined $response_data) {
-    # inicialization of temporal client array
-    my @client;
-
-    # parse items of one client
-    $client_id		= $response_data->{'CLIENT_ID'};
-    $hostname		= $response_data->{'HOSTNAME'};
-    $registered		= $response_data->{'REGISTERED'};
-    $requestor 		= $response_data->{'REQUESTOR'};
-    $service	 	= $response_data->{'SERVICE'};
-    $client_type	= $response_data->{'CLIENT_TYPE'};
-    $type		= $response_data->{'TYPE'};
-    $receive_own_events	= $response_data->{'RECEIVE_OWN_EVENTS'};
-    $description_tags	= $response_data->{'DESCRIPTION_TAGS'};
-    $ip_net_client	= $response_data->{'IP_NET_CLIENT'};
-
-    # push received clients from warden server into @clients which is returned
-    @client = ("$client_id", "$hostname", "$registered", "$requestor", "$service", "$client_type", "$type", "$receive_own_events", "$description_tags", "$ip_net_client");
-    push (@clients,\@client);
-
-    # go to the next received client
-    $i++;
-    $response_data = $response->valueof("[$i]");
-  }
-  return @clients;
-} # End of getClients
-
-
-#-------------------------------------------------------------------------------
-# getStatus - get warden server status
-#-------------------------------------------------------------------------------
-sub getStatus
-{
-  my $warden_path = shift;
-
-  my $etcdir = $warden_path . "/etc/";
-  my $libdir = $warden_path . "/lib/";
-
-  # read the config file
-  require $libdir .  "WardenConf.pm";
-  my $conf_file = $etcdir . "warden-client.conf";
-  my ($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file) = WardenConf::loadConf($conf_file);
-
-  my $response = c2s($uri, $ssl_key_file, $ssl_cert_file, $ssl_ca_file, "getStatus");
-
-  # match getStatus functions response
-  $response->match('/Envelope/Body/getStatusResponse/');
-  my @status;
-  my $i = 1;
-
-  # get first value from SOAP data object
-  my $response_data = $response->valueof("[$i]");
-  # parse items of server status
-  my $version			= $response_data->{'VERSION'};
-  my $address			= $response_data->{'ADDRESS'};
-  my $port			= $response_data->{'PORT'};
-  my $logdir			= $response_data->{'LOGDIR'};
-  my $piddir			= $response_data->{'PIDDIR'};
-  my $vardir			= $response_data->{'VARDIR'};
-  my $ssl_key_file_server	= $response_data->{'SSL_KEY_FILE'};
-  my $ssl_cert_file_server	= $response_data->{'SSL_CERT_FILE'};
-  my $ssl_ca_file_server	= $response_data->{'SSL_CA_FILE'};
-  my $facility			= $response_data->{'FACILITY'};
-  my $db_size			= $response_data->{'DB_SIZE'};
-  my $events_sum		= $response_data->{'EVENTS_SUM'};
-  my $events_last_id		= $response_data->{'EVENTS_LAST_ID'};
-  my $events_first_timestamp	= $response_data->{'EVENTS_FIRST_TIMESTAMP'};
-  my $events_last_timestamp	= $response_data->{'EVENTS_LAST_TIMESTAMP'};
-  my $clients_sum	 	= $response_data->{'CLIENTS_SUM'};
-
-  my @server_status = ("$version", "$address", "$port", "$logdir", "$piddir", "$vardir", "$ssl_key_file_server", "$ssl_cert_file_server", "$ssl_ca_file_server", "$facility", "$db_size", "$events_sum", "$events_last_id", "$events_first_timestamp", "$events_last_timestamp", "$clients_sum");
-  push(@status, \@server_status);
-
-  $i++;
-  $response_data = $response->valueof("[$i]");
-  while (defined $response_data) {
-    my @client_status;
-    # parse SOAP data object
-    my $client_id	= $response_data->{'CLIENT_ID'};
-    my $hostname	= $response_data->{'HOSTNAME'};
-    my $service 	= $response_data->{'SERVICE'};
-    my $count		= $response_data->{'COUNT'};
-    my $timestamp	= $response_data->{'TIMESTAMP'};
-    @client_status = ("$client_id", "$hostname", "$service", "$count", "$timestamp");
-    push(@status, \@client_status);
-    $i++;
-    $response_data = $response->valueof("[$i]");
-  }
-  return @status;
-} # End of getStatus
-
-1;

src/warden-server/sh/create_table.sh

-#!/bin/bash
-#
-# create_table.sh
-#
-# Copyright (C) 2011 Cesnet z.s.p.o
-# Author(s):    Tomas PLESNIK   <plesnik@ics.muni.cz>
-#               Jan SOUKAL      <soukal@ics.muni.cz>
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-#    notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-#    notice, this list of conditions and the following disclaimer in
-#    the documentation and/or other materials provided with the
-#    distribution.
-# 3. Neither the name of the Cesnet z.s.p.o nor the names of its
-#    contributors may be used to endorse or promote products derived from
-#    this software without specific prior written permission.
-#
-# This software is provided ``as is'', and any express or implied
-# warranties, including, but not limited to, the implied warranties of
-# merchantability and fitness for a particular purpose are disclaimed.
-# In no event shall the Cesnet z.s.p.o or contributors be liable for
-# any direct, indirect, incidental, special, exemplary, or consequential
-# damages (including, but not limited to, procurement of substitute
-# goods or services; loss of use, data, or profits; or business
-# interruption) however caused and on any theory of liability, whether
-# in contract, strict liability, or tort (including negligence or
-# otherwise) arising in any way out of the use of this software, even
-# if advised of the possibility of such damage.
-
-VERSION="1.0"
-
-sqlite=`which sqlite3`
-db_file="/opt/warden-server/var/warden.db"
-
-# create table events
-$sqlite $db_file  "CREATE TABLE events (id INTEGER PRIMARY KEY, hostname VARCHAR(256), service VARCHAR(64), detected TIMESTAMP, received TIMESTAMP, type VARCHAR(64), source_type VARCHAR(64), source VARCHAR(256), target_proto VARCHAR(16), target_port INT(2), attack_scale INT(4), note TEXT, priority INT(1), timeout INT(2), valid VARCHAR(1));"
-
-# create table clients
-$sqlite $db_file  "CREATE TABLE clients (client_id INTEGER PRIMARY KEY, hostname VARCHAR(256), registered TIMESTAMP, requestor VARCHAR(256), service VARCHAR(64), client_type VARCHAR(1), type VARCHAR(64), receive_own_events VARCHAR(1), description_tags VARCHAR(256), ip_net_client VARCHAR(256));"
-
-exit 0